My favourite recent example was an app that made me create an account, and allowed me to provide a 24 character password, which then sent me a validation email requiring a login on their website, where a 20 character password limit was in force.